Last updated: 27 October 2026

This Privacy Policy explains how personal data is collected, used, shared and protected when you visit https://roscarlisbon.com/, compare car rental offers, make a reservation or contact our support team.

1. Who We Are

RosCar Lisbon is a car rental aggregator that helps customers compare offers from international and local car rental companies and arrange reservations through the website. The vehicle and rental services are provided by the selected rental company under its rental agreement.

The website operator responsible for the processing described in this policy is:

Website: https://roscarlisbon.com/
Email: [email protected]

We act as a data controller when we determine why and how your personal data is processed, including for website administration, enquiries and reservation assistance. Booking partners, payment providers and rental companies may act as separate data controllers for their own services. Their privacy notices explain their respective processing activities.

2. Personal Data We Process

Depending on how you use the website and which booking service you select, the following categories of personal data may be processed:

Contact details, such as your name, email address, telephone number and country of residence.
Reservation information, including pickup and return locations, rental dates, selected vehicle, optional services, flight details where provided, and booking reference.
Driver information, such as age or date of birth, where required to check eligibility or calculate an offer.
Communications, including enquiries, requests, complaints and correspondence with customer support.
Transaction information, such as payment status, amount, currency, refund status and transaction reference, where made available to us.
Technical information, such as IP address, browser type, device information, access times, visited pages and security logs.
Cookie preferences and information collected through cookies or similar technologies, subject to applicable consent requirements.

A rental company may separately request your driving licence, passport, identity document or payment details to provide the vehicle. Documents submitted directly to a supplier are processed under that supplier’s privacy notice. Please do not send payment card details or identity documents to our general support email unless a secure and necessary procedure has been agreed.

3. How We Obtain Personal Data

We obtain personal data directly from you when you submit information, make an enquiry or use a booking form. Technical data may be collected automatically when you access the website.

Where necessary for reservation assistance, we may also receive booking references, reservation status, transaction status and related information from the booking partner, payment provider or rental company involved in your reservation.

If you provide information about another driver or traveller, you must be authorised to do so and make this policy available to that person.

4. Purposes and Legal Bases

Where the General Data Protection Regulation applies, we rely on the following legal bases:

Purpose	Legal basis
Responding to enquiries, providing requested offers and facilitating reservations, changes or cancellations.	Taking steps at your request before entering into a contract or performing our contract with you.
Sending reservation updates and providing customer support.	Contractual necessity, or our legitimate interest in resolving enquiries where the processing is outside our contractual obligations.
Maintaining website security, preventing abuse and investigating technical incidents.	Our legitimate interest in protecting users, systems and services.
Maintaining records required by tax, accounting or other applicable laws.	Compliance with a legal obligation.
Establishing, exercising or defending legal claims.	Our legitimate interest in protecting our legal rights.
Using optional analytics or advertising technologies, where implemented.	Your prior consent where required by law.
Sending optional marketing communications, where offered.	Your consent where required by law. You may unsubscribe at any time.

Where we rely on legitimate interests, we assess those interests against your rights and reasonable expectations. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

5. Information Needed for Reservations

Some information is necessary to respond to your request or arrange a reservation. Required fields should be identified in the relevant form. If you do not provide necessary information, the requested booking or service may not be available.

Optional information is voluntary. Refusing optional marketing or analytics consent does not prevent you from requesting a reservation.

6. Who Receives Your Personal Data

Personal data may be disclosed, where necessary for the purposes described above, to:

The selected rental company, to confirm and fulfil your reservation and handle rental-related requests.
Booking platform providers, to operate reservation systems and communicate booking updates.
Payment providers, to process payments, refunds and transaction verification.
Technology service providers, including hosting, security, email and support providers.
Professional advisers, where necessary for accounting, legal advice or dispute resolution.
Public authorities, where disclosure is required by law or a valid legal request.

Providers processing data on our behalf must do so under appropriate contractual arrangements. Providers acting as separate controllers are responsible for their own processing and privacy notices.

7. Booking Widgets and Third-Party Websites

The website may contain booking tools, embedded content or links operated by external providers. Information entered into a third-party booking tool may be collected directly by that provider and shared with the selected rental company.

Review the privacy notice displayed by the relevant provider before submitting personal data. This policy covers processing for which we are responsible and does not replace the privacy notices of independent providers.

8. Payments

The payment provider identified during checkout processes payment information under its own privacy and security arrangements. Depending on the integration, we may receive transaction references, payment status and other information needed to assist with your reservation.

The checkout page and booking terms identify the party receiving your payment and the conditions applicable to payments and refunds.

9. Cookies and Similar Technologies

The website may use cookies or similar technologies to support essential functions, remember preferences and, where enabled, measure website usage or support advertising.

Strictly necessary technologies support functions such as security, reservation sessions and recording privacy choices.
Optional preference technologies remember choices that are not essential to the service you request.
Analytics technologies help measure website usage.
Advertising technologies may measure campaigns or personalise advertising.

Where consent is required, optional technologies must remain inactive until you agree. You can refuse optional cookies and withdraw or change your consent through the website’s cookie settings, where these technologies are used.

The cookie notice or preference panel must identify the technologies actually used, their providers, purposes and durations. Browser settings also allow you to manage stored cookies, although blocking essential cookies may affect website functions.

10. International Data Transfers

Some service providers or rental partners may process personal data outside the European Economic Area. Where a transfer is subject to GDPR restrictions, an appropriate transfer mechanism is required, such as an applicable European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.

Contact us to request information about the safeguards applicable to transfers for which we are responsible, including how to obtain a copy, subject to necessary redactions.

11. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected, including any applicable legal obligations.

Enquiry records are retained for the time needed to resolve the enquiry and handle relevant follow-up matters.
Reservation and support records are retained for booking administration, complaint handling and applicable legal claim periods.
Accounting and transaction records are retained for the periods required by applicable law.
Security logs are retained for a period proportionate to detecting and investigating incidents.
Consent records are retained as necessary to demonstrate and manage your preferences.
Cookie durations are specified in the relevant cookie information.

Retention depends on the type of record, the applicable legal requirements and whether a dispute or investigation is ongoing. When retention is no longer necessary, data is deleted or anonymised.

12. Data Security

Appropriate technical and organisational safeguards are required to protect personal data against unauthorised access, loss, alteration and disclosure. These safeguards should reflect the nature of the information and the risks involved in processing it.

No internet transmission or storage system can guarantee absolute security. If you suspect that information relating to your reservation has been compromised, please contact us promptly.

13. Your Privacy Rights

Subject to applicable law and the conditions attached to each right, you may request:

Access to your personal data and information about its processing.
Correction of inaccurate or incomplete personal data.
Erasure of personal data where there is no lawful reason to retain it.
Restriction of processing in the circumstances provided by law.
Portability of eligible data processed automatically on the basis of consent or a contract.
Withdrawal of consent at any time where processing relies on consent.

You may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to processing for direct marketing at any time, including related profiling.

To exercise your rights, email [email protected]. We may request proportionate information to verify your identity. Please avoid sending identity documents unless specifically requested through an appropriate channel.

Where GDPR applies, requests are generally answered within one month. This period may be extended by up to two further months where necessary because of the complexity or number of requests. If an extension is needed, you will be informed within the initial month.

Requests concerning information controlled independently by a rental company or another provider should be addressed to that provider. We can assist in identifying the relevant contact where possible.

14. Complaints

You may contact us with any concern about the processing of your personal data. You also have the right to lodge a complaint with a competent data protection authority, particularly in the country of your habitual residence, place of work or the alleged infringement.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD). Further information is available at www.cnpd.pt.

15. Children

Our reservation services are intended for customers who meet the applicable age and contractual requirements. They are not directed at children. If you believe that a child has provided personal data without appropriate authorisation, please contact us so that we can assess and address the matter.

16. Changes to This Policy

This policy may be updated to reflect changes in the website, processing activities or applicable requirements. The latest version will appear on this page with an updated date. Where required, material changes will be communicated separately and new consent will be requested before processing that requires it.

17. Contact

For privacy enquiries or requests concerning your personal data, contact [email protected].